Static task
static1
Behavioral task
behavioral1
Sample
25f7ae28f731129c1ed0eca24da7e37f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
25f7ae28f731129c1ed0eca24da7e37f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
25f7ae28f731129c1ed0eca24da7e37f_JaffaCakes118
-
Size
281KB
-
MD5
25f7ae28f731129c1ed0eca24da7e37f
-
SHA1
d60d7f56b01539ad20d21f9ed7c5742d471b4169
-
SHA256
ea8d96c5eebb57e560286edc565b12da3239183cc04ccf0cca34afdaa65fc93e
-
SHA512
1d90a336bb66c769e4c158bfc2b72dcc33b222bcd560c2519e3e9e4dd8f22814de2808b8c74823f211f0932d7b071c6fbc1fc17268b5d662c6c457af25285a39
-
SSDEEP
6144:8L5CkrpzjAPWDXfhd9P1kwJjd+sC4wGpM7mOHFRHaHNrQfYb1:8L5CkVAPWDXf79P1FJjq4wiM7VR6+Yb1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25f7ae28f731129c1ed0eca24da7e37f_JaffaCakes118
Files
-
25f7ae28f731129c1ed0eca24da7e37f_JaffaCakes118.exe windows:4 windows x86 arch:x86
db7cbd09b643375ff7eff4b3c14b70f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
CreateMutexA
GetModuleHandleA
CreatePipe
CancelWaitableTimer
GetThreadLocale
GetThreadPriority
GetHandleContext
TlsFree
AddAtomA
TlsGetValue
GetOEMCP
IsDBCSLeadByte
ReleaseMutex
GetThreadTimes
GetUserDefaultLangID
GetConsoleCP
SetEvent
GetLargestConsoleWindowSize
GetExitCodeThread
CompareStringA
user32
GetClassInfoExA
GetSystemMetrics
CloseWindow
ValidateRect
GetWindow
GetWindowTextLengthA
GetClassNameA
IsIconic
InvalidateRect
RegisterClassA
GetWindowTextA
ReleaseDC
ReleaseDC
GetDC
GetFocus
IsWindowVisible
GetForegroundWindow
GetActiveWindow
ShowWindow
tapi32
MMCShutdown
MMCSetServerConfig
MMCInitialize
MMCSetPhoneInfo
MMCSetLineInfo
wldap32
ldap_add
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 876KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 94KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ